Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jun 25, 2024
Malicious code in dark-sky_weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in danger_brakeman (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in danger_apkstats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in danger-ios-logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in damn_weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cytokine (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cwlogs_s3 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in custom-logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in current-weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in curly-lib (RubyGems)
2 compromised versions
- Jun 25, 2024
Malicious code in cucumber-rake_runner (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in crl-watchdog (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cordova_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in contributors-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in commonmarker_pluggable (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in commission-junction_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in commandsy_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in comic-vine (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in codon (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in codestats_metrics-reporter (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cocoapods_icemobile-plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cocoapods_fixbugs-plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cloud-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in claide_plugins (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in city-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cinch_weatherman (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cinch_logsearch (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef_handler-statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef_handler-datadog-demo (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef_cloudsearch (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef-partial-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chalk_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ceedling_autorake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in catarse-paypal_express (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cat_dog (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cards-lib (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_telegram-notification (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_telegram (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_scm-gitsubmodules (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_runit-rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_rails-subdir (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_rails-logs-tail (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_copy-subdir (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_auth-subscriber (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_airbrake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano3_drupal (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano-telegram-notification (RubyGems)
1 compromised version
Page 59 of 71